Plango
Get Plango

For developers

Mac security

← AI agent vulnerabilities

CVE-2025-54382

Cherry Studio

9.6
Severity
Critical
Published
August 13, 2025
Last modified
June 17, 2026

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirection endpoints and failure to properly sanitize the URL. This issue has been patched in version 1.5.2.

CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness

References

CVE-2025-54382 on NVD

Listed in

CriticalMCP serversCommand injection

More Cherry Studio CVEs

Aug 13
CVE-2025-540749.8

Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode.